Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer
File:                     cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer (raw, json)
Hash identifier:          TLwBWQPc8NQWahfXjSTyK5B0OM5lmXIuYi1S/2pZTU4=
Subject key identifier:   A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858469847BD4D2894FA736BCCBA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jul 2024 23:40:26 +0000
Certificate not after:    Thu 22 Oct 2026 23:40:26 +0000
Subordinate resources:    AS: 401010
                          IP: 23.148.136.0/24
                          IP: 130.51.77.0/24
                          IP: 2602:face::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:98:47:bd:4d:28:94:fa:73:6b:cc:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 19 23:40:26 2024 GMT
            Not After : Oct 22 23:40:26 2026 GMT
        Subject: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:c8:9a:d5:8f:a3:b3:1b:f7:0c:da:89:7c:
                    29:3d:d8:87:55:92:53:64:e8:42:bd:1b:4e:6a:c0:
                    c2:1e:33:4f:2c:a1:63:01:94:66:bb:86:c0:f4:85:
                    a7:ec:84:49:dc:85:63:b1:95:04:aa:28:e1:a3:26:
                    bf:d9:00:97:86:4f:20:15:44:e0:89:08:1c:0d:f3:
                    08:09:ec:08:5a:81:2b:9e:1f:1d:19:44:5b:06:fd:
                    bf:32:08:00:ed:a6:23:34:c2:1f:1d:3a:3e:93:af:
                    63:a5:53:2a:03:1d:fb:00:49:d3:b8:df:cd:84:bf:
                    64:23:a2:84:ab:9f:e5:d3:ac:5c:d5:11:f8:89:20:
                    ee:98:d4:2a:05:77:36:e5:27:31:cf:b0:dd:95:35:
                    16:42:07:c8:0d:15:8e:9f:19:10:20:3d:6e:e2:58:
                    25:03:c5:28:7b:ac:20:81:2f:4f:4f:7a:92:e6:4d:
                    1d:36:6e:41:db:d1:eb:95:2f:37:63:84:3b:b7:cc:
                    38:72:ee:af:19:b4:65:98:79:d4:4b:56:3d:fd:03:
                    db:00:a7:46:d7:37:5c:de:dd:37:2b:7e:67:73:4e:
                    e7:91:cf:39:65:4e:35:2c:7d:ca:a6:3d:41:5c:a2:
                    17:79:8f:78:7a:fd:ed:4e:9a:54:b0:7e:06:de:e8:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.136.0/24
                  130.51.77.0/24
                IPv6:
                  2602:face::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401010

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:25:eb:33:44:d6:b7:7d:d3:d2:33:70:76:6e:1a:10:87:
         99:87:c5:a5:f8:d9:33:6a:94:d3:12:b0:67:35:30:5c:47:2e:
         b8:90:b4:e3:1f:e0:61:38:be:23:02:4e:96:c1:3c:0c:23:83:
         bb:58:19:fb:0b:fb:c2:20:01:b4:99:80:79:57:94:f7:e2:eb:
         60:bd:02:ae:e8:f8:9e:46:ce:5a:2c:50:21:47:a7:8a:7f:ed:
         1c:45:5e:05:61:b9:0e:06:0a:0a:7a:dc:d5:66:04:ec:eb:7d:
         0d:7c:7f:6d:9b:9e:23:7f:e2:a3:67:55:0e:dc:75:3c:42:30:
         c3:e6:2c:66:0c:ce:ad:c8:9d:66:74:5e:96:1e:17:29:1b:2a:
         c3:5b:47:64:99:17:f4:6d:ef:3c:07:4c:85:14:a6:2f:ef:0d:
         f5:c2:d3:98:f0:64:bc:d3:f1:db:ff:1c:9c:4c:84:a3:9a:36:
         40:67:9f:32:62:f6:1d:fe:2a:34:8d:26:78:43:e6:12:77:8c:
         a6:71:2b:73:ea:c3:26:15:db:10:97:55:c7:4b:82:ae:f0:6c:
         ab:6b:e0:6a:ab:51:a6:3f:9b:b8:9b:07:31:33:d3:cb:db:b8:
         42:32:93:20:89:da:98:17:8a:e9:e0:38:c8:86:6e:b3:d6:91:
         b3:36:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----